← Back to Skills Marketplace
jolestar

Helius Openapi Skill

by jolestar · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
214
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install helius-openapi-skill
Description
Operate Helius Wallet API reads through UXC with a curated OpenAPI schema, API-key auth, and read-first guardrails.
README (SKILL.md)

Helius Wallet API Skill

Use this skill to run Helius Wallet API operations through uxc + OpenAPI.

Reuse the uxc skill for shared execution, auth, and error-handling guidance.

Prerequisites

  • uxc is installed and available in PATH.
  • Network access to https://api.helius.xyz.
  • Access to the curated OpenAPI schema URL:
    • https://raw.githubusercontent.com/holon-run/uxc/main/skills/helius-openapi-skill/references/helius-wallet.openapi.json
  • A Helius API key.

Scope

This skill covers a read-first Helius Wallet API surface:

  • wallet identity lookup
  • batch identity lookup
  • wallet balances
  • wallet history
  • wallet transfers
  • wallet funding source lookup

This skill does not cover:

  • Helius RPC, DAS, or WebSocket surfaces
  • transaction submission
  • webhook setup
  • the broader Helius platform beyond the selected wallet intelligence endpoints

Authentication

Helius accepts API keys by query parameter or header. This skill standardizes on X-Api-Key header auth.

Configure one API-key credential and bind it to api.helius.xyz:

uxc auth credential set helius \
  --auth-type api_key \
  --api-key-header X-Api-Key \
  --secret-env HELIUS_API_KEY

uxc auth binding add \
  --id helius \
  --host api.helius.xyz \
  --scheme https \
  --credential helius \
  --priority 100

Validate the active mapping when auth looks wrong:

uxc auth binding match https://api.helius.xyz

Core Workflow

  1. Use the fixed link command by default:

    • command -v helius-openapi-cli
    • If missing, create it:
      uxc link helius-openapi-cli https://api.helius.xyz \
        --schema-url https://raw.githubusercontent.com/holon-run/uxc/main/skills/helius-openapi-skill/references/helius-wallet.openapi.json
      
    • helius-openapi-cli -h
  2. Inspect operation schema first:

    • helius-openapi-cli get:/v1/wallet/{wallet}/identity -h
    • helius-openapi-cli post:/v1/wallet/batch-identity -h
    • helius-openapi-cli get:/v1/wallet/{wallet}/balances -h
  3. Prefer narrow validation before broader reads:

    • helius-openapi-cli get:/v1/wallet/{wallet}/identity wallet=HXsKP7wrBWaQ8T2Vtjry3Nj3oUgwYcqq9vrHDM12G664
    • helius-openapi-cli get:/v1/wallet/{wallet}/funded-by wallet=HXsKP7wrBWaQ8T2Vtjry3Nj3oUgwYcqq9vrHDM12G664
    • helius-openapi-cli get:/v1/wallet/{wallet}/balances wallet=HXsKP7wrBWaQ8T2Vtjry3Nj3oUgwYcqq9vrHDM12G664 page=1 limit=20 showNative=true
  4. Execute with key/value parameters:

    • helius-openapi-cli post:/v1/wallet/batch-identity addresses:='["HXsKP7wrBWaQ8T2Vtjry3Nj3oUgwYcqq9vrHDM12G664"]'
    • helius-openapi-cli get:/v1/wallet/{wallet}/history wallet=HXsKP7wrBWaQ8T2Vtjry3Nj3oUgwYcqq9vrHDM12G664 limit=20
    • helius-openapi-cli get:/v1/wallet/{wallet}/transfers wallet=HXsKP7wrBWaQ8T2Vtjry3Nj3oUgwYcqq9vrHDM12G664 limit=20
    • For addresses:='[...]', keep shell quoting in mind. If your shell mangles that form, pass the JSON array as a bare positional payload instead.

Operation Groups

Wallet Identity

  • get:/v1/wallet/{wallet}/identity
  • post:/v1/wallet/batch-identity
  • get:/v1/wallet/{wallet}/funded-by

Wallet Activity

  • get:/v1/wallet/{wallet}/balances
  • get:/v1/wallet/{wallet}/history
  • get:/v1/wallet/{wallet}/transfers

Guardrails

  • Keep automation on the JSON output envelope; do not use --text.
  • Parse stable fields first: ok, kind, protocol, data, error.
  • Treat this v1 skill as read-only. Do not imply RPC write methods, transaction sending, or webhooks.
  • Helius labels the Wallet API as beta. Expect response shape drift and keep parsers focused on stable fields.
  • Start with small limit values before paginating large histories or transfer crawls.
  • Identity and funded-by lookups can return 404-style misses for unknown wallets; treat that as a data absence case before assuming auth failure.
  • helius-openapi-cli \x3Coperation> ... is equivalent to uxc https://api.helius.xyz --schema-url \x3Chelius_openapi_schema> \x3Coperation> ....

References

Usage Guidance
This skill otherwise looks coherent as a read-only Helius Wallet API helper, but before installing: (1) verify the skill's source/trustworthiness since homepage/source are unknown; (2) expect to have the 'uxc' CLI on PATH — the SKILL.md requires it even though metadata doesn't list it; (3) prepare a Helius API key (HELIUS_API_KEY) and bind it with uxc as shown — the metadata omission is likely an oversight but confirm you only grant a key scoped to read operations if possible; (4) review the included OpenAPI schema (references/helius-wallet.openapi.json) and the validate.sh script locally (it needs jq and rg) so you understand what the skill will call; (5) prefer using the bundled local schema rather than fetching the raw GitHub URL if you want to avoid remote schema fetches; and (6) if you plan to allow autonomous agent invocation, enforce agent policies limiting network calls or credential use since the skill will perform real network reads to api.helius.xyz.
Capability Analysis
Type: OpenClaw Skill Name: helius-openapi-skill Version: 1.0.0 The skill bundle is a well-structured integration for the Helius Wallet API, designed to perform read-only blockchain data lookups (identity, balances, history) via the 'uxc' utility. It follows standard patterns for API key management, includes a comprehensive OpenAPI schema (helius-wallet.openapi.json), and provides a validation script (validate.sh) to ensure structural integrity; no indicators of data exfiltration, malicious execution, or harmful prompt injection were found.
Capability Assessment
Purpose & Capability
The skill's description and SKILL.md clearly rely on the 'uxc' CLI and an API key for api.helius.xyz (HELIUS_API_KEY). However the registry metadata lists no required binaries and no required environment variables or primary credential — a mismatch between what the skill needs to operate and what the metadata declares.
Instruction Scope
SKILL.md limits actions to read-only Helius Wallet API endpoints, prescribes X-Api-Key header auth, and includes guardrails to avoid writes. It references a curated OpenAPI schema (both as a local file and a raw GitHub URL). No instructions ask the agent to read unrelated system files or exfiltrate data beyond the Helius endpoints.
Install Mechanism
There is no install spec (instruction-only), which reduces risk. The repo includes a validation script that requires jq and rg; those are development-time checks and not declared in metadata. No downloads or archive extraction are present.
Credentials
The SKILL.md explicitly instructs setting HELIUS_API_KEY via uxc credential binding, but the skill metadata does not declare any required environment variables or a primary credential. Requesting an API key for Helius is proportional to the stated purpose, but the omission in metadata is a notable inconsistency and could lead to surprise when the skill tries to use credentials.
Persistence & Privilege
The skill is not always:true, does not request persistent system-wide privileges, and does not modify other skills. Autonomous invocation remains enabled (platform default) but there are no added persistence flags or privilege escalations in the files reviewed.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install helius-openapi-skill
  3. After installation, invoke the skill by name or use /helius-openapi-skill
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of helius-openapi-skill. - Enables read-only access to Helius Wallet API endpoints via UXC and a curated OpenAPI schema. - Standardizes API-key authentication using the X-Api-Key header with uxc credential and binding setup. - Supports wallet identity, batch identity, balances, history, transfers, and funding source lookups. - Emphasizes read-first and identity-safe operational guardrails; prohibits transaction submissions and webhook setups. - Documents workflow for schema inspection, command line invocations, and guidance on automation best practices.
Metadata
Slug helius-openapi-skill
Version 1.0.0
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is Helius Openapi Skill?

Operate Helius Wallet API reads through UXC with a curated OpenAPI schema, API-key auth, and read-first guardrails. It is an AI Agent Skill for Claude Code / OpenClaw, with 214 downloads so far.

How do I install Helius Openapi Skill?

Run "/install helius-openapi-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Helius Openapi Skill free?

Yes, Helius Openapi Skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Helius Openapi Skill support?

Helius Openapi Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Helius Openapi Skill?

It is built and maintained by jolestar (@jolestar); the current version is v1.0.0.

💬 Comments